On the New York Times Bits blog, Saul Hansell writes about PayPal's fraud risk management techniques - noting that "you may not have ever bought anything with PayPal, but it’s got a file on you anyway, just in case."